Privacy Policy

Last Updated: October 14, 2026

Who We Are

NokPal – AI Calorie Tracker is operated and developed by Asadbek Sayfuddinov, an independent developer based in Uzbekistan.

If you have privacy questions or requests, contact us at: asadbek.s.dev@gmail.com

Scope

This Privacy Policy explains how we collect, use, share, and protect information when you use NokPal – AI Calorie Tracker, including our mobile app and related services.

Information We Collect

1) Personal Information

We may collect:

• Email address (for account creation, authentication, and account-related communication)
• Optional profile information you choose to provide

2) Food Image Data

When you take or upload meal photos:

• Images are sent to third-party AI processing providers to detect foods and estimate calories/macros
• Images may be temporarily transmitted and processed as needed to generate results
• Images are not used by us for advertising
• Images are not sold

3) Usage Data

We collect product usage information such as:

• Features used
• Session activity
• App interaction events

4) Device and Technical Data

We may collect limited device and app metadata, including:

• Device type
• Operating system
• App version

5) Health and Fitness Data (optional)

If you choose to connect Health Connect (Android) or Apple Health (iPhone), NokPal reads your daily step count and active calories burned on your device. This data is not uploaded to our servers. See Health and Fitness Data below for full details.

Health and Fitness Data

This section explains how NokPal accesses and handles health and fitness data. It describes how the current version of the app works.

What NokPal accesses

On Android, NokPal uses Health Connect and requests read-only access to exactly two data types:

• Steps
• Active calories burned

On iPhone, NokPal reads the same two types from Apple Health: steps and active energy. The Apple Health permission screen also lists walking + running distance, but NokPal does not currently read it.

NokPal does not ask to write, change, or delete anything in Health Connect or Apple Health. It does not read any other health data from them, such as heart rate, sleep, weight, workouts, or medical records. NokPal does not request background access or access to historical Health Connect data. It reads only while you are using the app.

Access is optional and requires your permission

• Connecting is optional. NokPal offers it during onboarding, where you can choose "Not now", and later from Profile → Health Connect (Android) or Profile → Apple Health (iPhone). Everything else in the app works without it.
• NokPal reads nothing until you grant permission on the Health Connect or Apple Health permission screen.
• Activity sync is a NokPal Premium feature. Without an active Premium subscription, NokPal does not read this data, even if you have granted access.
• You can turn access off at any time (see Turning off access below).

How NokPal uses this data

NokPal reads your total steps and active calories for the day you are viewing and uses them only to:

• Show your steps and active calories burned on the Home screen activity card
• Add the active calories you burned to that day's "calories remaining", so your nutrition tracking reflects your activity (your saved goals are not changed)
• Include that activity bonus in the daily calorie target shown on the NokPal home screen widget

On iPhone, NokPal may also read your total steps and active energy for the previous 7 days. This is only to check that Apple Health access is working, because Apple Health doesn't tell apps whether read access was granted.

We do not use health and fitness data for advertising or marketing. We do not sell it, use it to build advertising profiles, use it for credit, lending, insurance, or employment decisions, or use it to train AI models. NokPal's use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.

Where it is stored and who receives it

• Stays on your device: step counts and active calorie values are read and processed on your device. NokPal does not upload them to our backend (Supabase) and does not save them to your NokPal account.
• Not sent to AI providers: these values are not included in any request to the AI providers we use for food photo analysis or other AI features.
• Not shared with third parties: these values are not shared with or disclosed to our analytics, advertising measurement (Meta), or subscription (RevenueCat) providers, or anyone else.
• Sync status in analytics: when NokPal tries to read your activity, it records an event in Google Analytics for Firebase. The event says which source was used (Health Connect or Apple Health), whether the read worked, and, if it failed, a technical reason such as "permission denied". If you are signed in, the event is linked to your NokPal account ID like our other analytics events. It never contains your step count, calories, or any other health values.
• Temporary cache on your device: so the Home screen loads quickly, NokPal keeps a cache of recently viewed days in its private app storage on your device. The cache includes each day's meals, nutrition totals, steps, and active calories. Other apps can't read it, and it is removed when you sign out, when you delete your account in the app, or when you uninstall NokPal. On Android it is excluded from device backups. On iPhone, app data may be included in your own iCloud or computer backups, like any other app's data.
• Home screen widget: if you add the NokPal widget, it stores today's calorie and macro summary on your device, including the calorie target with your activity bonus. It does not store your step count.

How this data is protected

Health and fitness data is never sent to our servers. Access is controlled by Android's Health Connect and Apple Health permission systems, which you manage. The on-device cache lives in NokPal's private app storage, which the operating system protects from other apps, and it is excluded from Android device backups.

How long it is kept

• Our servers: we do not receive your step or active calorie values, so we don't keep them.
• Your device: the on-device cache keeps only recently viewed days. It is overwritten as you use the app and deleted when you sign out, delete your account in the app, or uninstall NokPal.
• Analytics sync-status events (which contain no health values) are kept according to the data retention setting of our Google Analytics for Firebase project and then deleted automatically.
• Health Connect and Apple Health: NokPal never writes to them, so it leaves nothing behind there. Your data in those apps stays under your control.

Turning off access

You can revoke NokPal's access at any time. NokPal then stops reading your data immediately.

• Android (Health Connect): in NokPal, open Profile → Health Connect → Manage in Health Connect and turn off NokPal's permissions. You can also open Health Connect directly: on Android 14 and later it is in your phone's Settings (often under Security & privacy → Privacy), and on Android 13 and earlier it is the Health Connect app. Then go to App permissions → NokPal. Menu names can vary slightly by device.
• iPhone (Apple Health): open the Health app, tap your profile picture, then Apps → NokPal, and turn off Steps and Active Energy. You can also use Settings → Privacy & Security → Health → NokPal.
• Uninstalling NokPal removes its access and deletes the on-device cache.

When you delete your NokPal account

• Your step and active calorie values are not stored on our servers, so there is no server-side health data to delete. Deleting your account permanently removes all your other data, as described at nokpal.app/delete-account.
• When you delete your account in the app, NokPal also clears the on-device cache, including any cached steps and active calories.
• If you request deletion on our website instead, any cache on your device stays there until you sign out or uninstall the app.
• Deleting your account does not turn off NokPal's Health Connect or Apple Health permission, and it does not delete anything from Health Connect or Apple Health. To stop access, revoke the permission as described above or uninstall NokPal.
• Analytics sync-status events (which contain no health values) are not removed when you delete your account. They are deleted automatically under the analytics retention setting described above.

For questions or requests about health and fitness data, contact asadbek.s.dev@gmail.com.

How We Use Information

We use collected information to:

• Provide core app functionality, including calorie and nutrition tracking
• Process food images and return AI-powered nutrition estimates
• Personalize your app experience
• Improve app quality, reliability, and features
• Analyze product usage and performance

AI Features and Important Disclaimer

NokPal uses artificial intelligence to estimate food content, calories, and macronutrients (protein, carbohydrates, and fats).

AI outputs are estimates and may not be 100% accurate. Results can vary based on image quality, meal complexity, and model limitations.

AI-generated results are estimates and should not be used for medical diagnosis or treatment.

NokPal is not a medical device and does not provide medical, nutrition, or dietary advice. Always use your own judgment and consult a qualified professional for health-related decisions.

Third-Party Service Providers

We use third-party service providers in categories such as:

• AI processing providers
• Analytics tools
• Cloud storage and backend infrastructure
• Payment processors (Apple App Store and Google Play)

These providers process data on our behalf (or as independent payment controllers, where applicable) to deliver app functionality and are expected to protect personal data using appropriate safeguards.

Payments and Subscriptions

In-app subscriptions and payments are processed by Apple App Store and Google Play.

We do not collect or store your full credit card or payment card details on our systems.

Data Sharing

We may share information only in these situations:

• Service providers: To operate, maintain, and improve NokPal
• Legal requirements: When required by law, regulation, legal process, or government request
• Protection of rights and safety: To protect users, the public, and our legal rights
• Business transfer: In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable privacy protections

Step counts and active calories read from Health Connect or Apple Health stay on your device and are not shared with anyone, including our service providers. See Health and Fitness Data.

International Data Transfers

NokPal is operated from Uzbekistan and offered globally. Your information may be processed in countries other than your own, including where our service providers operate.

When cross-border transfers occur, we take reasonable steps to ensure appropriate protections are applied under relevant data protection laws.

Data Retention

We keep personal data only for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements.

We will delete or anonymize data when it is no longer needed, and we will honor deletion requests and account deletion requests in line with applicable legal requirements.

You can delete your account and its data in the app (Profile → Delete Account) or request deletion without installing the app at nokpal.app/delete-account, which also lists what is deleted and what we may keep, and for how long.

Your Privacy Rights

Depending on where you live (including under GDPR/CCPA-style frameworks), you may have rights to:

• Access personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (see nokpal.app/delete-account)
• Withdraw consent where processing is based on consent

To make a privacy request, email: asadbek.s.dev@gmail.com

We may need to verify your identity before completing certain requests.

No Sale of Personal Data

We do not sell personal data.

We do not use your personal data for tracking across third-party apps or websites.

Children's Privacy

NokPal is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information, contact us and we will take appropriate steps to investigate and remove the data.

Security

We use industry-standard technical and organizational measures designed to protect personal information.

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Policy Updates

We may update this Privacy Policy from time to time to reflect product, legal, or operational changes.

When we make material changes, we will update the "Last Updated" date and, where appropriate, provide additional notice within the app or through other reasonable channels.

Contact Us

For any privacy questions, rights requests, or concerns, contact:

Asadbek Sayfuddinov
Email: asadbek.s.dev@gmail.com